nginx代理websocket支持wss訪問

hanye.com.conf配置以下

map $http_upgrade $connection_upgrade {  
     default upgrade;  
     ' ' close;  
 }  
 upstream hanye {  
     server 192.168.1.101:8888;
        server 192.168.1.102:8888;
 }  
 server {  
     listen 8888;  
     server_name hanye.com;
     ssl on;
     ssl_certificate /etc/nginx/ssl/hanye.com.crt;
     ssl_certificate_key /etc/nginx/ssl/hanye.com.key;
     ssl_session_timeout 10m;
     ssl_buffer_size     64k;
     ssl_session_cache       shared:SSL:10m;
     ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
     ssl_protocols TLSv1 TLSv1.1 TLSv1.2 SSLv3;
     ssl_prefer_server_ciphers on;
     ssl_verify_client off;
              add_header Access-Control-Allow-Origin *;
      add_header Access-Control-Allow-Methods 'GET, POST, OPTIONS';
      add_header Access-Control-Allow-Headers 'DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization';
      if ($request_method = 'OPTIONS') {
      return 204;
       }
             include deny_host.conf;
      if (!-e $request_filename){
       rewrite (.*) /index.php last;
      }
     location / {  
         proxy_pass http://hanye;  
         proxy_http_version 1.1;  
         proxy_set_header Upgrade $http_upgrade;  
         proxy_set_header Connection "Upgrade";  
                     proxy_connect_timeout 300s;
         proxy_send_timeout 900;
         proxy_read_timeout 900;
         proxy_buffer_size 32k;
         proxy_buffers 4 64k;
         proxy_busy_buffers_size 128k;
         proxy_redirect off;
         proxy_hide_header Vary;
         proxy_set_header Accept-Encoding '';
         proxy_set_header Referer $http_referer;
         proxy_set_header Cookie $http_cookie;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

     } 
     location ~ .*\.(gif|jpg|jpeg|png|bmp|swf|flv|mp4|ico)$ {
       expires 30d;
       access_log off;
     }
     location ~ .*\.(js|css)?$ {
       expires 7d;
       access_log off;
      }
      location ~ /\.ht {
        deny all;
      }
       }

}
    map指令的做用：
  該做用主要是根據客戶端請求中$http_upgrade 的值，來構造改變$connection_upgrade的值，即根據變量$http_upgrade的值建立新的變量$connection_upgrade，
   建立的規則就是{}裏面的東西。其中的規則沒有作匹配，所以使用默認的，即 $connection_upgrade 的值會一直是 upgrade。而後若是 $http_upgrade爲空字符串的話，

那值會是 close。

192.168.1.101:8888和192.168.1.102:8888;是真正的服務端地址，nginx所在域名是hanye.com.conf，代理的端口號是8888，因此前端訪問的時候這樣配置：

WEBSOCKET_URL: 'wss://hanye.com.conf:8888'。

訪問方式